DNS Gurus
Open Cached · just now
78/100 SECURITY SCORE

Certificate Information

Subject
CN=*.googleusercontent.com
Issuer
C=US, O=Google Trust Services, CN=WR2
Valid From
October 27, 2025
Valid Until
January 19, 2026 66 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
0E:24:41:60:9C:A8:84:DB:2A:59:E6:FB:EE:1C:E0:65:20:30:99:CA:03:50:4D:01:A9:B4:21:D9:CE:FD:8E:51
Alternative Names
145 domains

Security Configuration

TLS Protocols
TLS 1.0 TLS 1.1 TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)
Warnings
  • • TLS 1.1 is deprecated and should be disabled
  • • TLS 1.0 is deprecated and should be disabled

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

145 domains
googleusercontent.com *.googleusercontent.com *.aiplatform-notebook.googleusercontent.com *.aiplatform-training.googleusercontent.com *.apps.googleusercontent.com *.audiobook-additional-material-staging.googleusercontent.com *.audiobook-additional-material.googleusercontent.com *.backupdr-autopush.googleusercontent.com *.backupdr-dev.googleusercontent.com *.backupdr-sandbox.googleusercontent.com *.backupdr-staging.googleusercontent.com *.backupdr.googleusercontent.com *.byoid.googleusercontent.com *.cloudshell.googleusercontent.com *.cloudworkstations.googleusercontent.com *.composer-dev.googleusercontent.com *.composer-qa.googleusercontent.com *.composer-staging.googleusercontent.com *.composer.googleusercontent.com *.datafusion-api-dev.googleusercontent.com *.datafusion-api-staging.googleusercontent.com *.datafusion-api.googleusercontent.com *.datafusion-dev.googleusercontent.com *.datafusion-staging.googleusercontent.com *.datafusion.googleusercontent.com *.dataplex-dev.googleusercontent.com *.dataplex-staging.googleusercontent.com *.dataplex.googleusercontent.com *.dataproc-image-staging.googleusercontent.com *.dataproc-staging.googleusercontent.com *.dataproc-test.googleusercontent.com *.dataproc.googleusercontent.com *.fuchsia-updates-autopush-qual.googleusercontent.com *.fuchsia-updates-autopush.googleusercontent.com *.fuchsia-updates-dev.googleusercontent.com *.fuchsia-updates-staging.googleusercontent.com *.fuchsia-updates.googleusercontent.com *.gcc.googleusercontent.com *.gsc.googleusercontent.com *.kernels-staging.googleusercontent.com *.kernels-test.googleusercontent.com *.kernels.googleusercontent.com *.machinelearningtools-autopush.googleusercontent.com *.machinelearningtools-dev.googleusercontent.com *.machinelearningtools-staging.googleusercontent.com *.machinelearningtools.googleusercontent.com *.mos-updates-autopush-qual.googleusercontent.com *.mos-updates-autopush.googleusercontent.com *.mos-updates-dev.googleusercontent.com *.mos-updates-staging.googleusercontent.com *.mos-updates.googleusercontent.com *.notebooks.googleusercontent.com *.pipelines.googleusercontent.com *.safenup.googleusercontent.com *.sandbox.googleusercontent.com *.tensorboard-autopush.googleusercontent.com *.tensorboard-dev.googleusercontent.com *.tensorboard-staging.googleusercontent.com *.tensorboard-test.googleusercontent.com *.tensorboard.googleusercontent.com *.tuf-autopush.googleusercontent.com *.tuf-dev.googleusercontent.com *.tuf-staging.googleusercontent.com *.tuf.googleusercontent.com manifest.lh3-da.googleusercontent.com manifest.lh3-db.googleusercontent.com manifest.lh3-dc.googleusercontent.com manifest.lh3-dd.googleusercontent.com manifest.lh3-de.googleusercontent.com manifest.lh3-df.googleusercontent.com manifest.lh3-dg.googleusercontent.com manifest.lh3-dz.googleusercontent.com manifest.lh3.googleusercontent.com *.aiplatform-training.byoid.googleusercontent.com *.backupdr-autopush.byoid.googleusercontent.com *.backupdr-dev.byoid.googleusercontent.com *.backupdr-sandbox.byoid.googleusercontent.com *.backupdr-staging.byoid.googleusercontent.com *.backupdr.byoid.googleusercontent.com *.composer-dev.byoid.googleusercontent.com *.composer-qa.byoid.googleusercontent.com *.composer-staging.byoid.googleusercontent.com *.composer.byoid.googleusercontent.com *.datafusion-api-dev.byoid.googleusercontent.com *.datafusion-api-staging.byoid.googleusercontent.com *.datafusion-api.byoid.googleusercontent.com *.datafusion-dev.byoid.googleusercontent.com *.datafusion-staging.byoid.googleusercontent.com *.datafusion.byoid.googleusercontent.com *.dataproc-image-staging.byoid.googleusercontent.com *.dataproc-staging.byoid.googleusercontent.com *.dataproc-test.byoid.googleusercontent.com *.dataproc.byoid.googleusercontent.com *.dev.amp4mail.googleusercontent.com *.notebooks.byoid.googleusercontent.com *.playground-internal.amp4mail.googleusercontent.com *.playground.amp4mail.googleusercontent.com *.prod.amp4mail.googleusercontent.com manifest.c.mail.googleusercontent.com

Other domains in certificate

blogspot.com *.blogspot.com bp.blogspot.com *.bp.blogspot.com
doubleclickusercontent.com *.doubleclickusercontent.com
ggpht.com *.ggpht.com
manifest.lh3.photos.google.com
*.appspot.com.storage.googleapis.com commondatastorage.googleapis.com *.commondatastorage.googleapis.com *.content-storage-download.googleapis.com *.content-storage-p2.googleapis.com *.content-storage-upload.googleapis.com *.content-storage.googleapis.com *.storage-download.googleapis.com storage-p2.googleapis.com *.storage-p2.googleapis.com *.storage-upload.googleapis.com storage.googleapis.com *.storage.googleapis.com storage.mtls.googleapis.com
googledrive.com *.googledrive.com
*.googlesyndication.com *.safeframe.googlesyndication.com
googleweblight.com *.googleweblight.com
*.search.translate.goog translate.goog *.translate.goog
*.ads-static.usercontent.goog *.aiplayables.usercontent.goog *.allownetworkplayables.usercontent.goog *.executionbox.usercontent.goog *.h5games.usercontent.goog *.isolated.usercontent.goog *.playables.usercontent.goog *.safeframe.usercontent.goog *.sandbox.usercontent.goog *.scf.usercontent.goog *.static.usercontent.goog *.ucp.usercontent.goog usercontent.goog *.usercontent.goog